Copyright channelnewsasia
OSLO: A leading Norwegian public transport operator has said it will introduce stricter security requirements and step up anti-hacking measures after a test on new Chinese-made electric buses showed the manufacturer could remotely turn them off. Transport operator Ruter said test results published last week showed that Chinese bus maker Yutong Group had access to their control systems for software updates and diagnostics. “In theory, this could be exploited to affect the bus," it said. The tests — with buses driven in underground mines to strip away external signals — were conducted both on brand-new Yutong buses and on three-year-old vehicles from Dutch bus manufacturer VDL, the company said. It said the tests showed that the Dutch buses didn’t have the ability to conduct over-the-air software updates, while the Chinese-made buses did. Yutong did not immediately respond to requests from The Associated Press on Wednesday (Nov 5) seeking comment. The Guardian newspaper, which reported on the issue, cited a statement from the Chinese company that said it “strictly complies” with the laws and rules of places where its vehicles operate. The statement said data about its buses was stored in Germany. The newspaper cited an unidentified Yutong spokesperson saying the data is encrypted and is “used solely for vehicle-related maintenance, optimisation and improvement to meet customers’ after-sales service needs”. According to Yutong's website, the company has sold tens of thousands of vehicles across Europe, Africa, Latin America and the Asia-Pacific region in recent decades. The study was initiated in part over concerns about surveillance, at a time when many countries in Europe, North America and beyond have been taking steps to protect data about consumers and remote operations. BROADER WORRIES ABOUT REMOTE CONTROL OF EVS The findings showed that "the manufacturer has direct digital access to each individual bus for software updates and diagnostics”, said Ruter, which says it runs half of Norway's public transport and operates in Oslo and the eastern Akershus region. Concerns about remote control of electric vehicles are not new: US regulators in January opened a probe into Teslas after reports of crashes involving the use of company technology that allows drivers to remotely command their vehicle to return to them, or move to another location, using a phone app.
